jirinci 



(c) requirind a client process operatively coupled to the network to 
obtain the location identifier of the title from the access server prior to retrieving 
at least a portion of th^ title from the content server; and 

a client process to obtain from the access server the data 
:he portion of the title into executable form. 



(d) requinnc 
necessary to process 



2. (Amended) The method of claim 1 further comprising [the step of]: 

(e) requiring tthe client process to obtain [the] a signature of the access 
server and to present me signature to the content server before retrieving at least 
a portion of the title from the content server. 



3. (Amended) The method of claim 1 further comprising [the step of]: 

(e) requiring the client process to obtain from the access server time 
data defining a time period in which the client process may retrieve at least a 
portion of the title from the content server. 

4. (Amended) The nr ethod of claim 3 further comprising [the step of]: 

(f) requiring thcj client process to obtain new time data from the access 
server once the time peric d has expired and before retrieving at least a portion of 
the title from the content server. 

5. (Amended) The mothod of claim [1] 2 further comprising [the step of]: 
[(e)] (!) requiring th() client process to obtain new time data from the 

access server once the time period has expired and before retrieving at least a 
portion of the title from the content server. 



6. (Amended) An appafatus for secure delivery of content over a network 
comprising: 

(a) a content server operatively coupled to the network and having at 
least one title stored therein In unexecutable form; 
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(b) an access server operatively coupled to the network and having 
stored therein a location identifier of the title and data necessary to process the 




title into executable 
(c) a clien 



form; and 

system operatively coupled to the network and containing 
program logic configured to obtain from the access server the location identifier 
of the title and the dajta necessary to process the portion of the title into 
executable form. 



7. The apparatus of claim 6 wherein the client system further comprises: 
program logic configured to execute portion of the title. 

8. The apparatus of claim 6 wherein the access server further comprises: 
program logic comfigured to generate time data defining a time period in 

which the client system may retrieve at least a portion of the title from the content 
server. 

9. The apparatus of claim 8 wherein the client system further comprises: 
program logic configured to request new time data from the access server 

once the time period has expired. 

10. The apparatus of cla\m 6 wherein the network comprises a broadband 
access network. 



1 1 . (Amended) Apparatu^ for secure delivery of content over a network 
comprising: 

(A) a contentlserver comprising a processor, a memory and a 
network interface for operatively coupling the content server to the 
network, the content server further comprising: 

(A.1 ) authentication logic, responsive to a token received 

from a client process, the token containing data identifying a time 
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period^ and configured to determine whetlier the client process is 
authorized to accBss the memory at a specific time; and 

(A.2) accf ss logic, responsive to the token received from 
the token containing data uniquely identifying 
ored in the memory, [for enabling] and configured 
to the memory and the title uniquely identified by 



the client process 
one of the titles s 
to enable access 



the token; 

(B) an access jserver comprising a processor, a memory and a 
network interface for opejratively coupling the access server to the 
network, the access server further comprising: 

(B. 1 ) conversion logic, responsive to a unique identifier of a 

title supplied by a qlient process and configured to convert the 



unique identifier of 



he title into a location identifier indicating an 



address on the network where the title may be accessed; and 



(B.2) activa 
from a client procesfe 
response thereto; ar 
(C) a client system 
network interface for opera 



or generation logic responsive to a request 
and configured to generate an activator in 



server a token, an ac 



comprising a processor, a memory and a 
ively coupling the client system to the content 
server and the access server over the network, the client system further 
comprising: 

(C.1 ) progran| logic configured to obtain from the access 
ivator and a location identifier of the content 
server at which an identified title can be accessed; 

(C.2) programllogic configured to retrieve at least a portion 
of the identified title frdlm the content server; and 

(C.3) program bgic configured to execute the portion of the 
identified title retrieved from the content server. 
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12. The apparatus of cla m 11 wherein the client system further comprises an 
operating system executable on the processor] and wherein the client system 



further comprises: 



(C.4) 



program logic configured to mount a network file 
system associated with the identified title and store in the memory of the 
client system, a pluifality of registry entries related to the title; 

(C.5) I program logic configured to intercept requests from 
the operating system during title execution and redirect selected of the 
intercepted reques ; to the set of registry entries. 

13. The apparatus of cjaim 1 1 wherein the activator comprises cryptographic 
data. 



1 4. The apparatus of c 
bytecode and the client system 
(C.4) 

bytecode containe 



aim 1 1 wherein the activator comprises at least one 

further comprises: 
program logic configured to interpret and execute the 
i within the activator. 



15. The apparatus of 
the access server which 

16. The apparatus of 
authorization data. 

17. The apparatus of 
start time data and end t 



claim 14 wherein the token comprises data identifying 
generated the token. 

olaim 1 1 wherein the activator further comprises 



Diaim 1 1 wherein the token further comprises: 
me data which collectively define a time period. 



18. The apparatus of 
content server in the fornh 



:laim 1 1 wherein the title is stored in the memory of the 
of a briq. 
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